Job description

The Security Engineer - DFIR Lab at CPX in Abu Dhabi is responsible for managing and maintaining the Digital Forensics and Incident Response (DFIR) Lab infrastructure, hardware, software, processes, and documentation. The role supports cyber incident response engagements by ensuring availability and performance of forensic infrastructure and tools. Responsibilities include maintaining DFIR lab hardware and software systems, managing asset inventory, supporting license renewals, purchases, and budgeting activities, and deploying and configuring forensic and incident response tools including EnCase, Magnet Axiom, FTK, Cellebrite, THOR, Velociraptor, KAPE, IDA Pro, Security Onion, and FTK Imager. The role involves configuring forensic workstations, laptops, war laptops, servers, and storage systems while ensuring adherence to security, privacy, and data integrity standards. The Security Engineer implements access controls, logging, audit trails, and monitoring solutions, evaluates and tests new technologies, and develops automation scripts to streamline workflows. The position contributes to SOP creation, process documentation, lab configuration documentation, and forensic tool usage guidelines. The role collaborates with customers to deploy hardware and software for incident response and forensic engagements and executes lab tasks supporting cyber incident investigations. The position requires expertise in EDR, NDR, forensic artifact collectors, intrusion detection systems, security monitoring, log management, evidence management, and data acquisition. Additional technical responsibilities include managing Linux environments, networking devices such as switches, routers, and firewalls, storage systems including NAS, virtualization platforms including VMWare ESXi and Nutanix, server and desktop operating systems including Windows, Linux/Unix, and Mac, baseline system configurations, and cloud-based environments. The role operates within DFIR lab environments and requires experience handling digital forensic equipment such as write blockers, specialized cables, adapters, connectors, forensic workstations, and forensic laptops.